A new Linux Foundation open source signing tool could make secure software supply chains universal

sigstore could eradicate the headaches linked with present application signing technology as a result of general public ledgers.